Legal

Privacy Policy

Last Updated: 12 May 2025  |  Effective Date: 12 May 2025

Lanna Ledger ("we", "us", "our") is committed to handling the personal information of our students, enquirers, and website visitors with care, transparency, and in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it. If you have any questions, please contact us at [email protected].

1. What Personal Data We Collect

We collect the following categories of personal information:

  • Contact details: Name, email address, and telephone number (when provided through our enquiry form)
  • Correspondence: The content of messages you send us via the website contact form or by email
  • Course enrolment information: Name, contact details, and any background information voluntarily provided at the start of a course
  • Usage data: Information collected automatically through cookies — such as pages visited, session duration, and browser type — when analytics cookies are accepted
  • Financial information: We do not collect payment card numbers. Course fees are processed separately and not stored on our systems.

2. How We Collect Personal Data

  • Through the enquiry form on our website
  • Via email correspondence
  • During course registration and participation
  • Through cookies and analytics tools (with your consent — see Section 5)
  • By telephone when you call our office directly

3. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data on the following legal bases:

  • Consent: Where you have actively agreed — for example, by submitting an enquiry form or accepting analytics cookies
  • Contractual necessity: Where processing is required to deliver the course or service you have enrolled in
  • Legitimate interests: For administrative communications and improving our educational programmes
  • Legal obligation: Where required by Thai law

4. How We Use Your Personal Data

We use the information we collect for the following purposes only:

  • Responding to enquiries and providing information about our courses
  • Processing course enrolments and administering participation
  • Sending course-related communications (schedules, materials, reminders)
  • Improving our course content and website based on aggregated usage data
  • Complying with legal and regulatory obligations

We do not use your data for marketing or promotional purposes without separate, explicit consent. We never sell personal data. We never share personal data with financial product providers.

5. Cookies and Analytics

We use cookies on our website. Essential cookies are always active and required for the website to function. Optional analytics cookies are only set with your consent, which you can give or withdraw using the cookie banner on our homepage. You can also manage cookie preferences via our Cookie Policy page.

Analytics data is aggregated and does not identify individual visitors. We use this data only to understand how our website is used so we can improve it.

6. Data Sharing with Third Parties

We share personal data with third parties only in the following limited circumstances:

  • Service providers: Email and website hosting providers who process data on our behalf under data processing agreements
  • Analytics providers: Where analytics cookies have been accepted (e.g. Google Analytics — anonymised data only)
  • Legal requirements: Where disclosure is required by Thai law or a competent authority

We do not share personal data with any financial services providers, advertisers, or other commercial third parties.

7. How Long We Keep Your Data

  • Enquiry information: Up to 12 months from the date of your last contact, if you did not proceed to enrolment
  • Course enrolment data: Up to 3 years from the completion of your last course, for administrative and audit purposes
  • Legal and accounting records: As required by Thai law (typically 5–7 years)

After these periods, data is securely deleted.

8. Data Security Measures

We take reasonable and appropriate technical and organisational measures to protect personal data, including:

  • Secure HTTPS website with encrypted data transmission
  • Restricted access to personal data on a need-to-know basis
  • Regular review of data handling practices
  • No payment card information is stored on our systems

In the event of a data breach that is likely to harm your rights or freedoms, we will notify you and the relevant Thai supervisory authority in accordance with PDPA requirements.

9. Your Rights Under Thailand's PDPA

As a data subject under Thai law, you have the following rights:

  • Right to access: Request a copy of the personal data we hold about you
  • Right to rectification: Ask us to correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data, subject to legal retention requirements
  • Right to portability: Request your data in a structured, machine-readable format where applicable
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time without affecting lawfulness of prior processing
  • Right to lodge a complaint: Contact the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

10. External Links

Our website may include links to external sites — for example, Thai government resources or information pages. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately.

11. Children's Privacy

Our courses and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so inadvertently, we will delete that data promptly.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy from time to time.

13. Contact for Privacy Enquiries

If you have any questions about this policy or how we handle your personal data, please contact us:

  • Email: [email protected]
  • Address: Lanna Ledger, 12/5 Tha Phae Road, Chang Moi, Muang, Chiang Mai 50300, Thailand
  • Phone: +66 53 762 4189